Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/NuhqYFZF-P40hFkt_66eLkcpEdg.roa
File: NuhqYFZF-P40hFkt_66eLkcpEdg.roa (raw, json)
Hash identifier: NnZpEtLfEXfqAdGrqHcEnRsblIJeujsi0EYM5RMhwz0=
Subject key identifier: 36:E8:6A:60:56:45:F8:FE:34:84:59:2D:FF:AE:9E:2E:47:29:11:D8
Certificate issuer: /CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Certificate serial: 018CC6B92CDDF8D756778952B097D4D4BF4B
Authority key identifier: DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/NuhqYFZF-P40hFkt_66eLkcpEdg.roa
Signing time: Mon 01 Jan 2024 20:31:13 +0000
ROA not before: Mon 01 Jan 2024 20:31:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204155
IP address blocks: 194.31.120.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:47:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:2c:dd:f8:d7:56:77:89:52:b0:97:d4:d4:bf:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Validity
Not Before: Jan 1 20:31:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36e86a605645f8fe3484592dffae9e2e472911d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:92:1a:3a:bf:47:15:e7:84:92:cb:32:82:3a:
8f:73:55:cb:bf:2c:23:ae:3d:d4:d1:b3:f1:94:37:
87:e9:11:68:c5:20:ef:f2:d6:32:a9:5f:c0:d6:a4:
4f:2b:39:1b:ee:25:47:09:69:de:94:1d:dd:37:6e:
6d:28:ab:f8:79:eb:cf:a3:42:17:ae:d6:fb:6e:32:
18:17:af:c0:69:e3:54:0b:64:e2:44:c3:27:a6:7d:
55:a1:7f:e7:6f:67:03:59:e4:8f:d7:e7:e0:c5:06:
9c:04:78:44:e6:6b:e0:e0:ab:22:f4:a7:5d:6d:38:
c8:cf:50:6e:96:ff:44:66:6e:0b:cd:8d:32:2f:0b:
91:15:f8:ba:d7:b4:7c:a2:e3:ab:4e:64:e6:38:19:
c5:ea:d0:c3:9e:9e:20:02:38:b4:11:5c:a4:ac:b5:
87:f8:0c:cb:11:f9:ee:4b:e3:fa:48:79:9c:c4:fd:
8a:fc:be:d2:18:e0:7c:ff:0c:fc:31:c3:e1:a2:ec:
84:36:96:9b:4f:35:36:4a:1d:99:46:40:76:71:2a:
bd:c6:2d:3b:84:ca:02:33:a3:87:f9:d8:52:a8:da:
98:6e:f7:6f:21:64:4e:d5:b5:55:16:e2:f6:5e:76:
b0:3f:ea:2d:76:84:88:f6:59:29:63:c4:0a:f5:75:
88:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E8:6A:60:56:45:F8:FE:34:84:59:2D:FF:AE:9E:2E:47:29:11:D8
X509v3 Authority Key Identifier:
keyid:DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/NuhqYFZF-P40hFkt_66eLkcpEdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.120.0/21
Signature Algorithm: sha256WithRSAEncryption
2b:34:e5:91:5b:1c:a9:81:a3:69:4d:b3:71:f6:2f:79:10:c5:
8b:d1:59:3b:85:7d:52:9d:80:88:2e:10:68:93:f2:0a:46:96:
90:6b:e5:5f:44:e5:81:d4:cf:91:5d:14:df:87:7c:14:bc:c6:
cb:21:06:a6:0a:bb:4e:67:ad:a9:6d:ff:04:d8:48:5f:63:31:
23:68:39:56:82:a2:96:a1:b5:8d:02:13:6c:2e:8a:13:55:9b:
fa:54:28:09:62:af:ab:dd:51:ea:8a:65:be:1a:50:10:90:f4:
47:0a:59:8c:b7:35:91:cf:50:9f:d5:4f:65:79:d1:d1:ac:00:
0e:07:36:41:c3:aa:61:93:8d:00:2b:3b:1d:b7:55:bb:87:30:
8e:98:64:69:37:67:5a:01:aa:09:7f:9c:9b:16:c2:09:d1:1a:
6b:35:f1:85:64:46:f0:dc:78:91:89:96:d6:85:3e:80:af:a9:
ed:08:5b:13:ae:71:ec:d4:63:86:4c:3a:d2:dc:83:49:ac:40:
2e:24:e3:9c:0b:5c:36:bd:d9:f5:98:03:08:29:51:75:69:ba:
54:39:3e:0e:19:a9:76:ce:99:6c:08:16:fa:b7:40:18:b0:ed:
41:0c:8a:ea:7a:ab:af:6a:ed:61:78:2b:c9:42:9b:64:56:04:
be:aa:71:9a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuSzd+NdWd4lSsJfU1L9LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhNjBmNjQ2YmM3ZjQ4OGNhZjVlYmRjYTgwNzJjMDlkNjNm
NjFhMjEwHhcNMjQwMTAxMjAzMTEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmU4NmE2MDU2NDVmOGZlMzQ4NDU5MmRmZmFlOWUyZTQ3MjkxMWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5IaOr9HFeeEkssygjqPc1XLvywj
rj3U0bPxlDeH6RFoxSDv8tYyqV/A1qRPKzkb7iVHCWnelB3dN25tKKv4eevPo0IX
rtb7bjIYF6/AaeNUC2TiRMMnpn1VoX/nb2cDWeSP1+fgxQacBHhE5mvg4Ksi9Kdd
bTjIz1Bulv9EZm4LzY0yLwuRFfi617R8ouOrTmTmOBnF6tDDnp4gAji0EVykrLWH
+AzLEfnuS+P6SHmcxP2K/L7SGOB8/wz8McPhouyENpabTzU2Sh2ZRkB2cSq9xi07
hMoCM6OH+dhSqNqYbvdvIWRO1bVVFuL2XnawP+otdoSI9lkpY8QK9XWIgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDboamBWRfj+NIRZLf+uni5HKRHYMB8GA1UdIwQY
MBaAFNpg9ka8f0iMr169yoBywJ1j9hohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMm1EMlJyeF9TSXl2WHIzS2dITEFuV1AyR2lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wZDBkMTEtOGIwYy00MzYwLWFjNjEt
ZGFiOWY4YmE4ZmI2LzEvTnVocVlGWkYtUDQwaEZrdF82NmVMa2NwRWRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8wZDBkMTEtOGIwYy00MzYwLWFjNjEtZGFiOWY4YmE4ZmI2
LzEvMm1EMlJyeF9TSXl2WHIzS2dITEFuV1AyR2lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwh94MA0G
CSqGSIb3DQEBCwUAA4IBAQArNOWRWxypgaNpTbNx9i95EMWL0Vk7hX1SnYCILhBo
k/IKRpaQa+VfROWB1M+RXRTfh3wUvMbLIQamCrtOZ62pbf8E2EhfYzEjaDlWgqKW
obWNAhNsLooTVZv6VCgJYq+r3VHqimW+GlAQkPRHClmMtzWRz1Cf1U9ledHRrAAO
BzZBw6phk40AKzsdt1W7hzCOmGRpN2daAaoJf5ybFsIJ0RprNfGFZEbw3HiRiZbW
hT6Ar6ntCFsTrnHs1GOGTDrS3INJrEAuJOOcC1w2vdn1mAMIKVF1abpUOT4OGal2
zplsCBb6t0AYsO1BDIrqequvau1heCvJQptkVgS+qnGa
-----END CERTIFICATE-----
Generated at Sat Apr 19 01:46:08 2025 by rpki-client